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S (57) Abstract: A method is provided for conducting a financial transaction by a purchaser with a merchant having an acquirer bank, 
25 over a communications network. The method includes the steps of sending a first authorization request using a pseudo account 
number associated with a real account number to a service provider which forwards a second authorization request to the issuer 
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and where the authorization request if formatted as a standard payment card track having one or more fields including a discretionary 
field in which the message authentication code is placed. 
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AN IMPROVED METHOD AND SYSTEM FOR CONDUCTING 
SECURE PAYMENTS OVER A COMPUTER NETWORK 

SPECIFICATION 

PRIORITY APPLICATIONS 
5 This application claims priority to United States provisional 

application 60/195,963, filed on April 11, 2000, and entitled "Method and System for 
Conducting Secure Payments Over A Computer Network," which is hereby 
incorporated by reference, and to United States application serial number 09/809,367, 
filed March 15, 2001, and entitled "Method and System for Secure Payments Over A 
1 0 Computer Network," also incorporated by reference. 

BACKGROUND OF INVENTION 
This invention relates to a method and system for conducting secure 
financial transactions over a communications network and more particularly to a 
method and system for transmitting payments securely over a computer network, such 

15 as the Internet, and for transmitting sensitive information securely over public 
communication channels. 

As is self-evident, on-line commerce has ejqjerienced tremendous 
growth over the last few years but even with that growth consumers are still troubled 
and concerned about using personal financial information and transmitting such 

20 information, such as credit card numbers and personal identification nimibers, over 
public communications networks, such as the Intemet. As a result, over the last few 
years, companies have struggled to find a way ~ the best way ~ to ensure the security 
of payments made over a computer network and to decrease the risk of theft or misuse 
of financial information. 

25 For example, U.S. Patent No. 5,883,810 entitled "Electironic Online 

Commerce Card With Transaction Proxy Number For Online Transactions" and 
assigned to Microsoft Corporation, is directed to a system which provides for each 
transaction a temporary transaction number and associates it with the permanent 
account number; the transaction number looks like a real credit card number and the 

30 customer uses that transaction number and submits it to the merchant as a proxy for 
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the customer accoxmt number. In this matter, the customer does not have to transmit 
over a public network his or her real credit card number. 

In the '810 patent, the merchant passes along the transaction number to 
the issuing institution, which in turn uses the transaction number as an index, accesses 
5 the real customer account number and processes the authorization, sending the 
authorization reply back to the merchant under tiie transaction number. As a result, 
risk is purportedly minimized not only because the customer only transmits a 
transaction number but also because the proxy number is good only for a single 
purchase ~ theft "would not greatly benefit a Ihief because it cannot be repeatedly 

1 0 used for other purchases or transactions." Col. 2, lines 60-6 1 . 

There is a need to improve upon the prior art systems and in particular 
there is a need for a method and system for conducting a secure financial transaction 
over the Internet which avoids requiring the creation and transmission of a unique 
repeatedly generated transaction number to replace the transmission of the permanent 

1 5 account number for each conducted transaction. 

According to the invention of co-pending apphcation 09/809,367, filed 
March 15, 2001, which is incorporated herem by reference, a "pseudo" account 
number is assigned to a customer and cryptographically linked to a consumer's 
payment account number. The payment account number is an account number issued 

20 by a financial institution or other organization that a consmner may use to make a 

payment for goods and/or services. For example, the payment account number may be 
the account number from a payment card, such as a credit or debit card, or firom a 
payment application, such as an electronic cash application stored on a consumer's 
computer. The pseudo account number appears to be an actual payment account 

25 number to a merchant. That is, the pseudo account number has the same length as a 
valid payment account number and begins with a valid identification number (e.g., a 
"5" for MasterCard International Incorporated ("MasterCard")). The pseudo account 
number is used by the customer instead of the real account number for all of his or her 
on-Une financial transactions. 

30 According to the invention of the co-pending apphcation 09/809,367, 

all transactions based on pseudo account numbers are preferably cryptographically 
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authenticated using a secret key that is xmique for each account number. The 
authentication may be based on the private key of a pubhc-key pair ("pubhc-key 
authentication"), or based on a secret key other than a private key ("secret-key 
authentication"). Thus, if unauthorized persons were to ascertain any pseudo account 
5 numbers, they would be unable to make fraudulent transactions using them. 

This system can still be unproved upon and security can be further 
enhanced to protect the messages and information being transmitted during or in 
connection with a financial transaction being conducted over public communications 
lines. 

10 SUMMARY OF INVENTION 

According to the present invention, therefore, a method of conducting 
a transaction using a payment network is provided, in which a service provider 
receives a first authorization request for the authorization of a transaction usmg a first 
payment account number, wherein: 
15 (i) the first payment account number has a BIN 

code associated with the service provider, and is 
associated with a second payment account nimiber 
having a BIN code associated with an issuer of said 
second number; 

20 (ii) the first authorization request includes an 

acquirer code associated with an acquirer; and 
(iii) the first authorization request is routable through 

the payment network to the service provider based on 
the BIN code of the first payment account number. 

25 The method further uicludes havmg the service providei: respond to the 

first authorization request by transmitting a second authorization request for 
authorization of the transaction using the second payment account number, the second 
authorization request including an acquirer code associated with the service provider 
and being routable through the payment network to the issuer based on the BIN code 

30 of the second payment account number. 
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Additionally, a response to the second authorization request is received 
by the service provider from the issuer, where the response includes the acquirer code 
associated with the service provider and is routable through the payment network 
based on that code. A response to the first authorization request is then transmitted by 
5 the service provider to the acquirer based on the response to the second authorization 
request, and the response to the first authorization request preferably includes the 
acquirer code associated with the acquirer and is routable through the payment 
network based on that code. 

Another preferred embodiment of the invention includes a method of 

1 0 conducting a transaction with a merchant using a first payment account number that is 
associated with a second payment account number, where the method comprises: (a) 
generating a message authentication code based on one or more transaction details; 
(b) transmitting at least the first payment account number and the message 
authentication code to the merchant; (c) requesting by the merchant an authorization 

1 5 for payment of the transaction using the first payment account number, the request 
being formatted as if payment were tendered at a point-of-sale terminal with a 
conventional magnetic-stripe payment card, the message authentication code being 
transmitted in a discretionary data field contained in a track of the type used in the 
magnetic stripe of said conventional payment card; (d) responding to the authorization 

20 request for tihie first payment account number by requesting an authorization for 

payment of the transaction using the associated second payment account number; and 
(e) accepting or declining the authorization request for the first payment account 
number based on the response to the authorization request for the second payment 
account number and tiie message autiientication code. 

25 BRIEF DESCRIPTION OF THE DRAWINGS 

Further objects, features and advantages of the invention will become 
apparent firom the following detailed description taken in conjunction with the 
accompanying figures showing a preferred embodiment of the invention, on which: 

FIG. 1 is a block diagram of the system for obtaining a secure payment 
30 application from a provider over the Internet in accordance with the invention; 
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FIG. 2 is a flow diagram illustrating the flow of information between a 
cardholder and a merchant when conducting a secure payment over the Intemet using 
the present invention; 

FIG. 3 is a flow diagram illustrating the flow of information between 
5 an acquirer, a service provider and an issuer, in accordance with the present invention; 

FIG. 4 is a flow diagram illustrating the flow of information between 
an issuer, a service provider and an acquirer, in accordance with the present invention; 

FIG. 5 is a flow diagram illustrating the flow of communication 
between a merchant and an acquirer for purposes of settlement and clearing, in 
1 0 accordance with the present invention; 

Throughout the figures, the same reference numerals and characters, 
unless otherwise stated, are used to denote like features, elements, components or 
portions of the illustrated embodiment, Moreover, while the subject invention will 
now be described in detail with reference to the figures, it is done so in coimection 
1 5 with a preferred embodiment. It is intended that changes and modifications can be 
made to the described embodiment without departing from the true scope and spirit of 
the subject invention as defined by the appended claims. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 
Initialization of the Secure Payment Application 
20 In accordance with a preferred embodiment of the invention, a service 

provider issues, maintains and/or processes several components, including a secure 
payment application ("SPA"), of the secure payment system to be conducted in 
accordance with the techniques of the present invention. 

Figure 1 illustrates first how a cardholder with a financial transaction 
25 card may obtain a secure payment application from the service provider 1 0 over the 
Intemet, according to an exemplary embodiment of the present invention. It should 
initially be understood that a physical card is not necessary to utilize and obtain the 
benefits of the invention, but that only an account number be issued to a holder (in 
this case a cardholder) which identifies and links a user or participant to an account 
30 for purposes of conducting a financial transaction. The cardholder may contact a web 
server associated with the service provider using any appropriate device that may 
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communicate over the Internet, such as a computer, cellular phone, or a personal 
digital assistant (PDA). For the purpose of simpUcity iu the following discussions, it 
is assumed that the cardholder uses a computer to communicate over the Ihtemet. 

As shown in Fig. 1, the service provider, for example MasterCard 
5 International Incorporated (or an agent of MasterCard), has in its control one or more 
physically secure security modules 12, which offer physical protection for the 
information stored inside the modules. These security modules each contain one or 
more "derivation keys" that are used to create and re-create account-unique secret 
cryptographic keys, as explained below, which are provided within the secure 
10 payment appHcation. 

First, in accordance with a preferred embodiment of the invention, the 
cardholder must obtain an SPA from the service provider. The preferable steps for 
downloading and initializing the secure payment appUcation (SPA) include: 

1 . The cardholder contacts the service provider's web site via the Internet (either 
1 5 directly or throu^ a hyperlink to the web site through another web site, such 

as an issuer's web site. 

2. The cardholder provides, under SSL encryption generally known to those 
skilled in the art, (a) a payment card account number, (b) a card expiration 
date, and (c) card authenticating information. The card authenticating 

20 information may include, for example, the card's CVC2 value, which refers to 

a three or four digit value that is printed next to the signature panel of some 
cards. This value is generated by the issuing bank using a secret 
cryptographic key and can be verified using this same key. 

3 . The service provider may confirm the legitimacy of the card account number 
25 and the card expiration date by obtaining a zero amount authorization from the 

issuer of the cardholder's payment card. For instance, MasterCard may obtain 
this authorization over its Banknet™ communications network. 

4. The service provider may verify the CVC2 value if the issuer of the 
cardholder's payment card has provided the service provider with the 

30 cryptographic key(s) for verifying the CVC2 value. 
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5. The service provider may verify other card authenticating information by 
sending such information to the issuer for verification. 

6. After the service provider ("SP") has confirmed the legitimacy of the 
cardholder-provided card data, the SP creates or selects a pseudo account 

5 number and a secret key and embeds these data elements into a secure 

payment software application that is made available to the cardholder for 
download over the Internet preferably under SSL encryption. 

The pseudo account number has as its BIN a special BIN reserved for 
pseudo account numbers. The remainder of the pseudo account number is a value tiiat 
10 can be translated by the service provider via a table look-up process to the "real" 
account number. 

Preferably, tiie assigned special service provider BIN may be one from 
a set of many such special BINs, where each BIN may correspond to a particular 
country or region and/or to a particular product within a country or region. Thus, the 

1 5 assigned special BIN may be the one that corresponds to the country and/or the 
product of the submitted "real" accotmt nimiber. 

The secret key that the service provides preferably embeds in an SPA 
is xmique for each card account number and is preferably derived within a security 
module using the card account number and a derivation key. This derivation key may 

20 itself be derived within the same or another security module using a higher-level 
derivation key. 

The cardholder may provide a password to the service provider prior to 
downloading the secure payment appHcation or may select a password when the 
secure payment application is being installed on the cardholder's computer. If a 

25 password is provided or selected, the cardholder will thereafter be required to enter 
this password in order to activate the secure payment application. The password 
selected by the cardholder may be used to encrypt the secret key included in the SPA. 

As would be recognized by those skilled in the art, the SPA may be 
downloaded as part of a digital wallet application. In addition to the SPA, the digital 

30 wallet may store a cardholder's personal information and other appUcations, such as a 
purse application. 
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Generating Card-Unique Secret Keys 
The following steps may preferably be performed within a security 
module 12 controlled by the service provider or one of its agents to obtain a card- 
unique secret key to be included in the secure payment application. The following 
5 steps assume that the cardholder's payment card has a 16-digit account number and 
that the Data Encryption Algorithm (DBA) known to those skilled in the art, with a 
double-length key is used. The DEA is a U.S. Government standard cryptographic 
algorithm that is described in Federal Information Processing Standard (FTPS) 46-1, 
which is incorporated herein by reference in its entirety. The DEA is also defimed in 
10 the ANSI standard X9.32, which is also incorporated herein by reference in its 
entirety. 

It is also assumed that the security module holds a secret high-level 
key called the derivation key that consists of 16 bytes and is used with many or all 
card accoimt numbers to cryptographically compute a card-unique secret key, called 
15 the Per-Card Key, given the cardholder's 16-digit payment account nimiber. The 
derivation key may be unique for each country or for each special bank identification 
number or BIN. 

Preferably, the steps are: 

1 . Considering the payment account number as 1 6 binary-coded-decimal digits 
20 of 4 bits each, DEA-encrypt these 64 bits using as the encryption key the left- 
most 8 bytes of the 16-byte Derivation Key. 

2. DEA-decrypt the result of Step 1 using as the decryption key the right-most 8 
bytes of the 1 6-byte Derivation Key. 

3 . DEA-encrypt the result of Step 2 using as the encryption key (again) the left- 
25 most 8 bytes of the 16-byte Derivation Key. 

4. Use the result of Step 3 as the left-most 8 bytes of the unique Per-Card Key. 

5 . DEA-encrypt the result of Step 3 using as the encryption key the left-most 8 
bytes of the 16-byte Derivation Key. 

6. DEA-decrypt the result of Step 5 using as the decryption key the right-most 8 
30 bytes of the 16-byte Derivation Key. 
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7. DEA-encrypt the result of Step 6 using as the encryption key (again) the left- 
most 8 b3^es of the 16-byte Derivation Key. 

8. Use the result of Step 7 as the right-most 8 bytes of the 16-byte unique Per- 
Card Key, and place this key in the secure payment application in such a way 

5 that it will not be disclosed during the normal operation of this application. 

Communication Between Cardholder and Merchant 
Fig. 2 illustrates the flow of information between the cardholder 14 and 
merchant 16 when conducting a secure payment over the Internet according to an 
exemplary embodiment of the present invention. 
10 Once the SPA has been installed on a cardholder's computer, the 

cardholder preferably uses the SPA for all Internet payments and the SPA provides 
the cardholder's pseudo account number for all Internet transactions. 

Once a cardholder has indicated a desire to conduct a transaction, it is 
desirable (but not essential) that the merchant pass to the cardholder's computer the 
15 following data elements: (1) the acquirer BIN, (2) the MID (the merchant identifier as 
known to the acquirer), and (3) the date and time (GMT or equivalent) of the 
transaction. 

Preferably, the SPA uses its embedded, secret key to create a Message 
Authentication Code (MAC) relating to the transaction. For example, a MAC of 
20 approxiinately 8 decimal digits may be created on the following data elements: 

1 . A transaction sequence number stored in the cardholder' s SPA and 
incremented by the SPA whenever it generates a MAC. This transaction 
sequence number may be, for example, six (6) decimal-digits in length. 

2. The acquirer BIN if received from the merchant, otherwise zeros (which may 
25 be, for example, 6 decimal digits). 

3. The Mm if received from the merchant, otherwise zeros (which may be, for 
example, 6 decimal digits). 

4. Date and time, to the nearest hour or minute (in GMT), if received from the 
merchant, otherwise zeros (which may be, for example, 10 decimal digits). 
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5. The transaction amount, as displayed for the cardholder, and as normally 
included in the message from cardholder to merchant (which may be, for 
example, 8 decimal digits). 

Preferably, a merchant is able to accept a full Track-l image from the 
5 cardholder' s computer, just as if the merchant were prepared to communicate with 
computers that include magnetic-stripe readers. (The Track-l image refers to the data 
on track 1 of the magnetic stripe of a payment card.) Moreover, the merchant 
preferably is able to pass the Track-l data to the acquirer as if the transaction were a 
point-of-sale (POS) transaction. 
10 If the merchant can accept the fiiU Track- 1 data, the MAC itself and 

the data elements upon which the MAC is based are placed in the Track-l 
discretionary-data field. The pseudo account number is placed in the Track-l 
account-number field, and the card expiration date is placed in the Track-l expiration- 
date field. 

15 By sending the MAC in the Track- 1 discretionary-data field, many 

merchants will not need to make any changes to their systems and/or software 
because they can already handle POS transactions, which include Track-l 
discretionary data. For other merchants, systems and/or software to handle POS 
transactions are readily available. 

20 If a merchant cannot accept the full Track- 1 data, the SPA may send a 

conventional SSL payment message, except that the pseudo account number is used 
instead of tiie cardholder's "real" account number. The merchant then sends the 
transaction data to the acquirer in the manner that it normally does. In practice, 
during a transition period, the merchants that are not capable of handling POS 

25 transactions with Track-l data might not be required to receive and handle MACs. 

Instead of being sent in the Track-l discretionary-data field, the MAC 
may also be sent in another format, in which case merchants and acquirers may be 
required to change their systems and/or software to handle tibis other format. 

Upon receipt of the cardholder's transaction message, the merchant 

30 formats a conventional authorization request for the acquirer. For those merchants 
that are able to able to accept Track-l data, this authorization request will be 
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formatted exactly as if it originated from a POS terminal and will include the Track-1 
data provided by the cardholder. 

Should a merchant initiate multiple authorization/clearing transactions 
for a cardholder transaction, preferably only the first of these transactions will include 
5 the Track-1 data. The subsequent transactions will mclude only the pseudo account 
number and expiration date and may be considered mail-order-telephone-order 
transactions. This is true for all recurring payments and partial payments with 
multiple clearings. 

Acquirer Handling of Authorization Request 
10 Fig. 3 illustrates the communication between an acquirer 18, service 

provider 10, and an issuer according to an exemplary embodiment of the present 
invention. 

The presence of Track-1 data in an Intemet transaction should not 
adversely impact those acquirers who receive transactions from Intemet merchants via 

1 5 conventional telephone lines, since such transactions will be formatted identically to 
transactions from conventional point-of-sale terminals. However, acquirers who 
receive-transactions via the Intemet (and not conventional telephone) may need a 
"conversion box" that would deliver transactions without Track-1 data unchanged and 
would deliver transactions with Track-1 data over a different physical wire as if they 

20 had come from POS terminals. The design of such a conversion box is well within 
the ability of a person of ordinary skill in the art. 

Wlien an acquirer 18 receives an authorization request message from 
an Intemet merchant 16, it looks up the issuer BIN in its BEST table. In the case of a 
pseudo account number fransaction, the "issuer" will correspond to a service provider- 

25 authorized processing facility 1 0, which will receive the request. In the case of a non- 
pseudo or real account number, normal processing will take place. 

Some countries may have a special security-module-equipped facility 
that handles domestic transactions. Each such domestic facility would preferably be 
set up only with the service provider' s approval and would hold only the 

30 cryptographic keys and account-number conversion data for the country whose 

transactions it processes. In countries with such a domestic facihty, all same-country 
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transactions will be sent to this facility. This can also be done for individual banks in 
a country, if it is so desired. 

A domestic facility to handle domestic transactions would be far more 
efficient than causing domestic transactions to go through a central processing 
5 facility. 

Service Provider Handling of the Authorization Request 
When the service provider receives the request, it determines from the 
issuer BIN whether the account number is really a pseudo account number and, if so, 
sends the transaction to a special system for processing. This system translates the 

1 0 pseudo account number to the "real" account number using a table-lookup procedure. 
If the system determines that a Track-1 image is included, it uses a security module to 
derive the appropriate Per Card Key for this card account number in order to verify 
the MAC. (The derivation of the Per Card Key is described above.) 

If the MAC is verified, the system then examines the BIN in the Track- 

15 1 discretionary-data area. If this is not all zeros, the system compares this BIN with 
the acquirer BIN of the transaction, and verifies that the date and time included in the 
Track-1 discretionary-data area are reasonable (taking into consideration that the 
merchant may batch its transactions and obtain delayed authorizations). The system 
also verifies that the authorization request amount does not exceed the transaction 

20 amount in the Track-1 discretionary-data area (the amount as approved by the 
cardholder) by more than a specified amount (e.g., 20%). 

It is possible that an acquirer may include the MED in the Acqmrer 
Reference Data (which is also called the Acquirer Reference Nimiber). It is assumed 
that the 23-digit Acquirer Reference Data includes a mandatory "transaction type" 

25 indicator and a mandatory acquirer BIN, but that the remaming digits are for the 
acquirer's discretionary use and may in some cases include the MID. The service 
provider may obtain from its Internet acquirers an indication of which acquirers 
include the MID in the Acquirer Reference Data, and if so, where in the Acquirer 
Reference Data they include it. In the case of such an acquker, if the Track-1 image 

3 0 includes an acquirer BIN (ratibier than six zeros), the service provider system may also 
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verify that the MID in the Track-l discretionary-data area matches the MID in the 
Acquirer Reference Data, 

The service provider system may store a history of transaction 
sequence numbers (TSNs) for comparison with transaction sequence numbers in 
5 authorization requests. The comparison may be triggered by some condition, such as 
when the Track-l amount exceeds some specified threshold (e.g., $200). Such a 
threshold may be lower when the Track-l image does not include an acquirer BIN. 
When the comparison is triggered, the system may compare the transaction sequence 
number included in tiie Track-l discretionary-data area against the stored history of 

1 0 transaction sequence numbers for the relevant card account number. If the transaction 
sequence number of the current transaction is 1) higher than the smallest stored value 
for the current account number and 2) does not match any stored value for this 
account, there is a reasonable assurance that the current transaction is not the 
fraudulent replay of data from a previous legitimate transaction. 

1 5 The stored history of TSNs may be limited to a predetermined number 

of TSNs. For example, the system might store only the last 10 fransaction sequence 
numbers received for a particular card account number. In addition, the verification 
of transaction sequence numbers need not occur in real time. It may occur while the 
system is obtaining an authorization from an issuer. 

20 The purpose of these checks is to make it very difficult for wrongdoers 

who operate in collusion with Intemet merchants and who may be able to obtain 
unencrypted transaction data to fraudulently replay data from legitimate transactions. 

Once the service provider system has completed the above-described 
verification processes (with the possible exception of the transaction sequence number 

25 verification), the system formats an authorization request message for the issuer 20. 
This message includes the "real" account number and expiration date, but excludes 
the other Track-l data. The system replaces the acquirer BIN with one of the special 
BINs that serves as a "pseudo" acquirer BIN. The acquirer BIN is replaced so that the 
issuer responds to the service provider instead of the acquirer. 

30 In order for the acquirer and issuer to compute interchange fees 

correctly, the pseudo acquirer BIN should preferably correspond to the country in 
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which the acquirer is located or to another country or region that will provide the 
same resultant interchange fees. If each country has a special BIN associated with it, 
the service provider may replace the acquirer BIN with the special BIN associated 
with the acquirer's country. If an acquirer's country does not have a special BIN 
5 associated with it, a special BIN associated with another country may be selected that 
results in the same interchange fees. 

The service provider stores in a database the Acquirer Reference Data 
received in the authorization request from the acquirer (hereinafter referred to as the 
"original Acquirer Reference Data"). In formatting an authorization message for the 

1 0 issuer, the service provider preferably replaces the original Acquirer Reference Data 
with "pseudo" Acquirer Reference Data that includes the pseudo acquirer BIN, an 
appropriate transaction-type indicator, and an index value that the service provider 
can use to find the original Acquirer Reference Data. 

When a domestic facility processes a pseudo-account-number 

15 transaction, it operates as described above. Preferably, however, this domestic facility 
will process only transactions for domestic issuers, and therefore will need only the 
cryptographic keys and account-number conversion table entries that apply to that 
country. 

Issuer Handling Of Authorization Request 
20 Fig. 4 illustrates the communication between the issuer 20, the service 

provider 10, and an acquirer 18 according to an exemplary embodiment of the present 
invention after the issuer has received an authorization request from, the service 
provider or firom an authorized domestic processing facility. 

The issuer 20 authorizes the transaction just as it would any other 
25 transaction. It sends the authorization response back to the '•pseudo" acquirer BIN, 
which will be either a service provider facility or a facility authorized by a service 
provider. 

When the service provider 10 receives an authorization response from 
an issuer, it examines the acquirer BIN to determine whether it is a "pseudo" acquirer 
3 0 BIN. If so, the service provider determines that the authorization response 

corresponds to a pseudo account number transaction that must be "restored" to its 
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original format. Thus, the service provider translates the "real" account nximber back 
to the pseudo account number, and restores the Acquirer Reference Data that had been 
in the original transaction. The service provider then transmits the resulting message 
to the "real" acquirer, which processes the transaction normally and sends the 
5 authorization response to the merchant in the normal way. The merchant responds to 
the authorization response as it would for any other transaction. 

Settlement and Clearing 
Figure 5 illustrates the flow of communication between a merchant 16, 
an acquirer, service provider or payment processor, for example, MasterCard's 

1 0 Banknet, and an issuer for the purpose of settlement and clearing according to an 
exemplary embodiment of the present invention. 

A clearing message is processed essentially in the same manner as an 
authorization request message. As previously described, the acquirer 18 (because of 
entries in its BIN table) automatically routes a clearing message using a pseudo 

1 5 account number preferably to the service provider 10 or payment processor. At this 
facility, the pseudo accoimt number is replaced by the "real" account number, the 
acquirer BIN is replaced by the "pseudo" acquirer BIN, and the remainder of the 
Acquirer Reference Data is replaced by an index that the service provider can 
subsequently use to obtain the original Acquirer Reference Data. The clearing 

20 message with tiiese changes is transmitted to the "real" card issuer 20, which 

processes the transaction in the normal way. If the acquirer happens to also be the 
issuer, the service provider returns the cleared transaction to the acquirer with the real 
account number and proper fee calculations. 

Exception Processing 

25 When a message about a transaction must be transmitted back to the 

acquirer or merchant from an issuer, the message is processed by the issuer as it 
normally would process any transaction message. Since the transaction as known to 
the issuer includes the "pseudo" acquirer BIN, the "pseudo" acquirer BIN will cause 
the transaction message to be routed to a service provider facility. At this facility the 

30 "real" account number is replaced by the pseudo account number, and the pseudo 
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Acquirer Reference Data is replaced with the original Acquirer Reference Data. The 
transaction message is then routed to the acquirer, which processes it hke any other 
such transaction message. 

Issuance of Plastic Cards for Identification 
5 In some situations, a cardholder may buy a ticket over the Internet and 

will be required, upon showing up at the event to which the ticket grants admission, to 
produce the card used in the transaction in order to authenticate rightful possession of 
the ticket. 

To accommodate such situations, the service provider may issue and 
10 mail physical plastic cards to cardholders who obtain pseudo account numbers for 
Internet use. These cards would clearly indicate "for identification purposes only, not 
valid for transactions" on them. The embossed and encoded account number would 
be the pseudo account number, though the CVC2 may be that of the "real" payment 
card. 

15 As another alternative, those merchants that have a legitimate need to 

authenticate a cardholder using a pseudo account number may register with the 
service provider (by providing to the service provider appropriate identification and 
authentication information), and the merchants will be provided with a secret key or 
certificate as cryptographic proof of their registration. Thereafter, such merchants 

20 may obtain "real" account numbers firom a service provider facility by providing a 
copy of the pseudo-account-number transaction details under cryptographic 
authentication that authenticates both the transaction data and the merchants' right to 
obtain a "real" account number. The service provider may then forward the "real" 
account numbers in encrypted form to the merchants, so that the cardholders may be 

25 identified with the cards corresponding to their "real" account numbers. 

Advantageously, the present invention provides enhanced security for 
the use of payment account numbers over the Internet. 

The foregoing merely illustrates the principles of tiie invention. It will 
thus be appreciated that those skilled in the art will be able to devise numerous 

3 0 systems and methods which, although not explicitly shown or described herein, 
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CLAIMS 

1 . A method of conducting a transaction using a payment network, 
comprising: 

(a) receiving by a service provider a &st authorization request for the 
5 authorization of a transaction using a first payment account number, wherein: 

(i) the first payment account number has a first BIN 
code associated with the service provider and is 
associated with a second payment account number 
having a second BIN code associated with an issuer of 

10 said second number, said second payment account 

number not being included in said first authorization 
request; 

(ii) the first authorization request includes a first 
acquirer code associated with an acquirer; and 

1 5 (iii) the first authorization request is routable through 

the payment network to the service provider based on 
said first BIN code; 

(b) responsive to the first authorization request, transmitting by the service 
provider a second authorization request for authorization of the transaction using the 

20 second payment account number, the second authorization request including a second 
acquirer code associated with the service provider and being routable through the 
payment network to the issuer based on said second BIN code; 

(c) receiving a response to the second authorization request by the service 
provider firom the issuer, the response including the second acquirer code and being 

25 routable through the payment network based on that code; and 

(d) transmitting a response to the first authorization request by the service 
provider to the acquirer based on the response to the second authorization request, the 
response to the first authorization request including the first acquirer code and being 
routable through the payment network based on that code. 
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2. The method of claim 1, wherein said response to the second 
authorization request from the issuer further includes said second payment account 
number, and said response to the first authorization request by the service provider 
fiirther includes said first payment account number. 

5 3 . The method of claim 1 , wherein said first authorization request 

comprises a message authentication code including transaction data, and said request 
is formatted with a standard track having a plurality of fields including a discretionary 
field in which said message authentication code is placed. 

4. The method of claim 3, wherein said service provider verifies the 
10 message authentication code. 

5 . A method of conducting a transaction with a merchant over a 
communications network using a first payment account number that is associated with 
a second payment account number, the method comprising: 

(a) generating a message authentication code based on one or more 
15 transaction details; 

(b) transmitting at least the first payment account number and the message 
authentication code to the merchant; 

(c) requesting by the merchant an authorization for payment of the 
transaction using the first payment account number, the request being formatted as if 

20 payment were tendered at a point-of-sale terminal with a conventional magnetic-stripe 
payment card, the format having a track with at least a discretionary data field and 
said message authentication code being transmitted in said discretionary data field; 

(d) responsive to the authorization request for the first payment accoimt 
number, requesting an authorization for payment of the transaction using the second 

25 payment account number; and 

(e) accepting or declining the authorization request for the first payment 
account number based on the response to the authorization request for the second 
payment account number and the message authentication code. 
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6. The method of claim 5, wherein said first and second payment account 
munbers include respective BIN codes, the first associated with a service provider and 
the second associated with an issuer of the second payment account number, said 
service provider receiving said merchant's request through a payment network based 

5 on said first BIN code, and wherein said service provider generates said request for 
authorization of payment using the second payment account number and routes said 
request to said issuer through said network based on said second BIN code. 

7. The method of claim 6, wherein said service provider includes in said 
request for authorization for payment an acquirer code associated with said service 

10 provider, such that said response fi:om said issuer is routed back to said service 
provider. 

8. The method of claun 1, wherein said request by said merchant includes 
an associated merchant acquirer code, and wherein said service provider generates a 
message based on said accepting or declining step and routes that message to said 

1 5 associated merchant acquirer code. 

9. A method of conducting a transaction over a communications network 
comprising: 

issuing by an issuer having an issuer BIN a first payment account number to 
a user having a computer, said issuer BIN being associated with said first payment 
20 account number; 

providing a security module for generating a secret key unique to each first 
account number issued; 

generating a second account number associated with said first payment 
account number; 

25 providing a secure payment application by a service provider to said 

computer, said application comprising said second account number and said secret 
key; 

storing said secure payment appUcation on said computer; 
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selecting a merchant with whom to conduct said financial transaction, said 
merchant having an associated acquirer BIN; 

passing to said computer transaction data; 

generating a message authentication code based on said transaction data; 
5 transmitting track data to said merchant, said track data comprising said 

message authentication code and said second account number; 

generating a first authorization request based on said data; 
transmitting said first request to said service provider; 
verifying said fibrst request with said secret key; 
10 obtaining said first payment account number associated with said second 

account number; 

transmitting a second authorization request using said first payment account 
number to said issuer BIN associated with said number; and 
authorizing or rejecting said second request. 

15 10. The method of claim 9, wherein said track data comprises a 

discretionary data field, an account number field, and an expiration date field, and 
wherein said transmitting track data step further includes 

placing said message authentication data in said discretionary data field; 
placing said second account number in said account number field; and 
20 placing an expiration date in said expiration date field. 

1 1 . The method of claim 1 0, wherein said transaction data include said 
associated acqtiirer BIN, and a transaction amount, 

1 2 . The method of claim 1 1 , wherein said verifying step further includes 
verifying said transaction data. 

25 13. The method of claim 9, wherein said second authorization request 

includes an acquirer code associated with said service provider, and further 
comprising the steps of: 
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generating a message based on said authorizing or rejecting step; 
forwarding said message to said service provider based on said acquirer 
code; and 

using said merchant's associated acquirer BIN to advise said merchant of 
5 said message. 
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